Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ef7aa2db-752b-32e6-9f6f-0c24556da891.roa
File:                     ef7aa2db-752b-32e6-9f6f-0c24556da891.roa (raw, json)
Hash identifier:          Q1urky6l5uA5jfT8eYanie+TEUlZML/haKZb49tC9Oo=
Subject key identifier:   20:53:41:E1:81:AE:1F:C6:FA:AA:A4:07:8C:D9:D2:4B:28:8D:70:C9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161B689523899C43A47DA40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ef7aa2db-752b-32e6-9f6f-0c24556da891.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     198949
IP address blocks:        71.67.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:b6:89:52:38:99:c4:3a:47:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=d4b7c2f2-24db-4c16-a9aa-2e6310aea379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:40:2e:af:97:0f:82:ab:f8:af:77:be:f3:
                    3e:aa:ab:72:d3:a5:78:9f:2a:c8:9a:a7:3c:e5:d9:
                    e9:89:0e:fe:34:9f:fc:7b:4d:84:6e:3e:56:53:b3:
                    4e:82:30:be:91:7a:3c:2a:d1:11:82:55:df:fa:1c:
                    fe:f3:04:bc:c3:c0:d6:3f:5d:ad:5d:80:66:6e:2f:
                    99:f8:8f:8a:27:ef:93:e2:56:a4:fc:12:cd:99:25:
                    0e:e5:a2:35:77:db:9f:18:b9:d5:96:17:c9:e7:c9:
                    96:46:b9:cf:90:f7:a1:f6:cb:91:b9:bb:16:b3:55:
                    15:d4:88:3b:8c:62:65:49:8c:e0:bb:e2:b5:ee:cc:
                    4a:01:f8:f7:0d:a3:56:f3:ab:f7:44:60:91:ec:37:
                    ef:01:34:cb:10:dd:85:47:df:07:b9:40:4f:c9:35:
                    eb:dd:b0:b5:9b:01:f0:bf:87:14:12:85:d5:5c:fb:
                    b6:9c:e0:d1:59:94:23:5b:30:2e:db:31:4d:bc:20:
                    53:44:40:b8:4b:f5:13:77:cc:ae:66:81:81:9e:82:
                    bd:34:01:24:b3:0b:45:55:f1:31:e1:92:21:ec:be:
                    fe:82:96:75:3b:a3:15:2e:e9:1c:69:bd:bb:5e:32:
                    35:c8:32:63:4c:a0:e1:7d:84:25:9e:d6:ed:8b:31:
                    25:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:53:41:E1:81:AE:1F:C6:FA:AA:A4:07:8C:D9:D2:4B:28:8D:70:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ef7aa2db-752b-32e6-9f6f-0c24556da891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.67.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a4:79:a9:e9:63:d7:89:d2:8f:3a:8c:3a:d6:64:7a:90:d8:
         1f:f6:48:5c:96:d3:ef:27:e0:a8:6c:22:b0:cd:ef:bb:a0:38:
         89:8e:2b:1c:c4:e7:49:e2:e8:17:6e:cc:2f:df:1a:1c:f8:bd:
         84:94:77:cf:ed:3c:a7:02:5f:e0:55:a3:42:65:fd:80:32:d0:
         9d:ea:b8:52:90:af:0d:6d:b4:bd:62:e4:14:8c:96:32:a3:16:
         f4:05:ad:6c:e1:7f:3d:ae:71:1f:73:df:63:c4:3d:02:fb:b7:
         00:ae:ad:75:af:d6:55:26:1a:5a:af:79:4a:59:6a:a8:84:0a:
         a1:d8:c9:80:77:11:8d:59:be:30:36:a0:f6:14:03:ab:5e:12:
         78:41:ed:45:1b:fe:6f:91:ac:d5:de:bb:84:07:89:a7:f2:9c:
         7d:4e:c4:b3:be:3b:0a:ac:88:fc:ad:2e:86:3c:a1:f3:b3:ca:
         f1:76:93:26:16:07:35:cd:22:9b:bf:5c:ae:4e:f9:0c:5e:0a:
         a0:b2:cd:ba:4b:69:92:46:80:2f:c5:ad:e5:74:13:36:5c:0f:
         a7:a7:37:9f:b7:ea:c0:52:87:60:9a:e6:63:9c:51:b0:a8:6a:
         f5:90:34:4e:d4:09:16:59:2d:05:23:cc:0c:0f:35:04:32:f2:
         51:83:c4:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYbaJUjiZxDpH2kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
ZDRiN2MyZjItMjRkYi00YzE2LWE5YWEtMmU2MzEwYWVhMzc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK1ALq+XD4Kr+K93vvM+qqty06V4nyrImqc8
5dnpiQ7+NJ/8e02Ebj5WU7NOgjC+kXo8KtERglXf+hz+8wS8w8DWP12tXYBmbi+Z
+I+KJ++T4lak/BLNmSUO5aI1d9ufGLnVlhfJ58mWRrnPkPeh9suRubsWs1UV1Ig7
jGJlSYzgu+K17sxKAfj3DaNW86v3RGCR7DfvATTLEN2FR98HuUBPyTXr3bC1mwHw
v4cUEoXVXPu2nODRWZQjWzAu2zFNvCBTREC4S/UTd8yuZoGBnoK9NAEkswtFVfEx
4ZIh7L7+gpZ1O6MVLukcab27XjI1yDJjTKDhfYQlntbtizElWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCBTQeGBrh/G+qqkB4zZ0ksojXDJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZWY3YWEyZGItNzUyYi0z
MmU2LTlmNmYtMGMyNDU1NmRhODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR0PVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+keanpY9eJ0o86jDrWZHqQ2B/2SFyW0+8n4KhsIrDN77ugOImOKxzE
50ni6BduzC/fGhz4vYSUd8/tPKcCX+BVo0Jl/YAy0J3quFKQrw1ttL1i5BSMljKj
FvQFrWzhfz2ucR9z32PEPQL7twCurXWv1lUmGlqveUpZaqiECqHYyYB3EY1ZvjA2
oPYUA6teEnhB7UUb/m+RrNXeu4QHiafynH1OxLO+OwqsiPytLoY8ofOzyvF2kyYW
BzXNIpu/XK5O+QxeCqCyzbpLaZJGgC/FreV0EzZcD6enN5+36sBSh2Ca5mOcUbCo
avWQNE7UCRZZLQUjzAwPNQQy8lGDxNQ=
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:19:50 2025 by rpki-client